--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T13:56:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T13:56:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-17T13:56:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-17T13:56:28Z" name: csr-cbwgf resourceVersion: "6355" uid: 8bbb4867-0583-4238-974a-a151c583f031 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=04dfb10322ef58c5f76f643352069616e1f0c51ab30b911ac953922e6796f044 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-16.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-17T13:56:28Z" lastUpdateTime: "2026-07-17T13:56:28Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved